Review the configuration for FortiClient IPsec shown in the exhibit. Which statement is correct regarding this configuration?

A common FortiClient IPsec VPN configuration employs split tunneling, where the client is instructed to install specific routes only for the designated remote networks. This ensures that only traffic intended for the corporate network traverses the VPN tunnel, while other traffic (e.g., internet access) uses the local network connection directly.

The client would install a default route only if configured for full tunneling, which sends all client traffic through the VPN, a different routing behavior than typically implied by specific destination routes.

While a route to a specific IP range might theoretically be possible, routing is typically configured for entire subnets (e.g., 172.20.1.0/24), not individual IP addresses or a small, non-standard range like 172.20.1.[1-5].

FortiClient IPsec establishes a Layer 3 tunnel that installs routes on the client, whereas web portal mode is characteristic of SSL VPNs, which often operate as application-layer proxies or require a separate client and do not typically install direct IPsec routes.